No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


AR500, AR510, and AR530 V200R007 Commands Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
sa binding vpn-instance (Manual IPSec policy view)

sa binding vpn-instance (Manual IPSec policy view)


The sa binding vpn-instance command binds a VPN instance to an IPSec tunnel.

The undo sa binding vpn-instance command unbinds a VPN instance from an IPSec tunnel.

By default, no VPN instance is bound to an IPSec tunnel.


sa binding vpn-instance vpn-instance-name

undo sa binding vpn-instance






Specifies the name of the VPN instance bound to an IPSec tunnel.

The name of the VPN instance must already exist.


Manual IPSec policy view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

On an VPN with small VPN sites, if CEs and PEs are connected through the Internet but not leased lines, hosts connected to a CE can access resources on another VPN site only through the insecure Internet. To enhance access security, these hosts can connect to the backbone network of the VPN through an IPSec tunnel.

This command specifies the VPN that the remote end of the IPSec tunnel belongs to. The tunnel initiator then can obtain the outbound interface and send packets through the outbound interface.


A VPN instance has been created using the ip vpn-instance command.


# Bind the VPN instance vpna to the IPSec tunnel.

<Huawei> system-view
[Huawei] ip vpn-instance vpna
[Huawei-vpn-instance-vpna] ipv4-family
[Huawei-vpn-instance-vpna-af-ipv4] route-distinguisher 100:1
[Huawei-vpn-instance-vpna-af-ipv4] vpn-target 100:100
 IVT Assignment result: 
Info: VPN-Target assignment is successful.
 EVT Assignment result: 
Info: VPN-Target assignment is successful.
[Huawei-vpn-instance-vpna-af-ipv4] quit
[Huawei-vpn-instance-vpna] quit
[Huawei] ipsec policy policy1 100 manual
[Huawei-ipsec-policy-manual-policy1-100] sa binding vpn-instance vpna
Updated: 2019-05-29

Document ID: EDOC1000097293

Views: 134943

Downloads: 142

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Previous Next